CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

PT-2024-29964 · Openhab +1 · Openhab +1

Name of the Vulnerable Software and Affected Versions: openHAB CometVisu add-on versions prior to 4.2.1 Description: The CometVisuServlet in openHAB's CometVisu add-on is susceptible to an unauthenticated path traversal vulnerability. This issue allows local files on the server to be requested vi...

WordPress Ajax Search Lite plugin < 4.12.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Ajax Search Lite versions 4.12.1...

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is a lightweight agent from Zscaler, Inc. A security vulnerability exists in Zscaler Client Connector versions prior to 4.2 that stems from the presence of incorrect input validation that allows operating system command injection...

PT-2024-29455 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi versions prior to 4.7.9 Description: The issue allows a remote attacker to execute arbitrary code via the file upload method. This is a Cross Site Scripting vulnerability. Recommendations: For versions prior to 4.7.9, update to a versio...

PT-2024-12282 · Unknown · Fluid Topics

Name of the Vulnerable Software and Affected Versions: Fluid Topics versions prior to 4.3 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, where an authenticated user can force the server to make arbitrary requests to internal and external resources...

PT-2024-27514

Name of the Vulnerable Software and Affected Versions lxml versions prior to 4.9.1 Description An XML External Entity XXE vulnerability in the ebookmeta.get metadata function allows attackers to access sensitive information or cause a Denial of Service DoS via crafted XML input. Recommendations F...

VulnCheck KEV: CVE-2018-4233

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the...

AZL-44454 CVE-2024-4067 affecting package js-jquery 3.5.0-4

The NPM package micromatch prior to 4.0.8 is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability occurs in micromatch.braces in index.js because the pattern . will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the...

PT-2024-27671 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 Description: The issue allows a local attacker to execute arbitrary code in TCB through a heap buffer overflow. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to resolve the...

CVE-2024-23480

A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2...

Dell OpenManage Enterprise 跨站脚本漏洞

Dell OpenManage Enterprise is an easy-to-use, one-to-many systems management console for IT infrastructure management from Dell. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. A cross-site scripting vulnerability exist...

CVE-2024-23735

Cross Site Scripting XSS vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate...

PT-2024-23216 · Invision Power Services · Invision Community

Name of the Vulnerable Software and Affected Versions: Invision Community versions prior to 4.7.17 Description: The issue allows remote code execution via the applications/core/modules/admin/editor/toolbar.php IPScoremodulesadmineditor toolbar::addPlugin method. This method handles uploaded ZIP...

PT-2024-24027 · Soflyy · Soflyy Oxygen Builder

Name of the Vulnerable Software and Affected Versions: Soflyy Oxygen Builder versions prior to 4.9 Description: The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection', which allows code injection in Soflyy Oxygen Builder. This is a critical issue that ca...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v4.0.0. A local attacker exploiting the vulnerability could execute arbitrary code via out-of-bounds...

PT-2024-20968 · Unknown · Processmaker

Name of the Vulnerable Software and Affected Versions: ProcessMaker versions prior to 4.0 Description: The issue allows a remote attacker to run arbitrary code via control of the pm sys sys cookie. This can lead to a Cross Site Scripting attack. Recommendations: For versions prior to 4.0, update ...

JupyterHub 跨站脚本漏洞

JupyterHub is a multi-user server for Jupyter. A security vulnerability exists in JupyterHub versions prior to 4.1.0, which stems from a vulnerability that allows an attacker to directly impact a user's session by tricking the user into visiting a malicious subdomain...

CVE-2023-37886

Missing Authorization vulnerability in InspiryThemes RealHomes realhomes.This issue affects RealHomes: from n/a through 4.3.8...

AZL-44337 CVE-2024-24479 affecting package wireshark for versions less than 4.4.7-1

A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/tostr.c, and formatfractionalpartnsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected...